IBM Hardware Management Console (HMC) Policies Security Technical Implementation Guide

The IBM Hardware Management Console (HMC) Policies Security Technical Implementation Guide (V2 R1) has 4 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

4STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V2 · R1

CurrentPublished Thu Apr 27 2023

Backup of critical data for the HMC and its components must be documented and tracked

IBM Hardware Management Console (HMC) Policies Security Technical Implementation Guide

Assessment Title

Rule Text

Backup of critical data for the HMC and its components must be documented and tracked

Description

Discussion Text

If procedures for performing backup and recovery of critical data for the HMC is not in place, system recoverability may be jeopardized and overall security compromised.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-256856

Rule

SV-256856r890914_rule

Severity

medium

Rule Version

HMCP0130

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Review the documentation for backup of critical data for a HMC with the System Administrator.
Review documentation for completeness and accuracy.

If no documentation exists, this is a FINDING.

Implementation Procedure

Fix Text

Verify that procedures for backup of the critical data for the HMCs are properly documented. If not, create Backup Procedures documentation.

CPC data should be backed-up when configuration or CPC- licensed internal code changes have been made or as a routine preventive maintenance procedure.

STIG check 4 of 4 in the IBM Hardware Management Console (HMC) Policies STIG checklist

← Previous · V-256855System shutdown procedures documentation must exist for each partition defined to the system.